CVE-2025-13743 — Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs
Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization. This poses a risk of leaking sensitive information in …
Published: 2025-12-09 · CVSS: 2.4 · CVSS 4.0
Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization. This poses a risk of leaking sensitive information in exported diagnostics, especially when access denied errors occurred.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7